A research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure.